Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/F1C-W18JBuZ3DwKJbqt7VODSj0c.roa
File: F1C-W18JBuZ3DwKJbqt7VODSj0c.roa (raw, json)
Hash identifier: Y9ZQxggXvGC4LgGWiQHK5Jt5MzR3+6ut8VgiuhztwF4=
Subject key identifier: 17:50:BE:5B:5F:09:06:E6:77:0F:02:89:6E:AB:7B:54:E0:D2:8F:47
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018D447BAAAABFD31425B6C3EC306C422B91
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/F1C-W18JBuZ3DwKJbqt7VODSj0c.roa
Signing time: Fri 26 Jan 2024 06:36:11 +0000
ROA not before: Fri 26 Jan 2024 06:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50131
IP address blocks: 45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.145.74.0/23 maxlen: 32
45.150.164.0/22 maxlen: 32
45.150.226.0/23 maxlen: 32
45.151.132.0/22 maxlen: 32
45.154.212.0/22 maxlen: 32
94.154.114.0/24 maxlen: 32
178.22.30.0/24 maxlen: 32
188.93.139.0/24 maxlen: 32
193.218.200.0/23 maxlen: 32
193.221.94.0/23 maxlen: 32
194.124.218.0/23 maxlen: 32
194.124.224.0/23 maxlen: 32
194.147.98.0/23 maxlen: 32
194.147.100.0/23 maxlen: 32
212.18.111.0/24 maxlen: 32
2a0e:da40:4000::/34 maxlen: 128
Validation: Failed, certificate revoked on Mon 29 Jan 2024 04:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:7b:aa:aa:bf:d3:14:25:b6:c3:ec:30:6c:42:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 26 06:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1750be5b5f0906e6770f02896eab7b54e0d28f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:f6:0a:ed:63:97:27:2e:ab:b3:16:9a:14:
3a:ed:e3:c0:03:a0:d3:f7:45:e1:81:7e:fb:17:6b:
cc:c0:56:d5:da:e6:77:51:27:c8:d4:bc:96:67:61:
ef:35:7b:f9:27:aa:e4:2b:c1:3f:7c:83:5f:80:44:
30:69:f8:b2:d7:2f:de:ca:c2:55:16:66:c5:e6:ee:
fd:77:e8:0b:60:7d:86:c4:e8:30:b6:2e:87:f9:01:
41:b1:ff:8b:52:c7:78:c7:d2:73:b9:ca:7f:2b:b5:
2c:82:63:e6:b6:42:20:c7:b7:36:9e:cf:b5:00:bb:
d0:ea:9a:8e:14:9d:d1:16:9b:c0:df:b2:60:9c:3f:
ce:6c:d2:6a:99:6c:42:06:ee:ee:c9:50:b2:cb:6d:
56:1d:2b:2a:45:eb:69:54:6d:0f:91:b6:b4:78:33:
0f:ae:15:dd:cc:cf:96:e5:bf:e2:b5:2e:fb:bf:4e:
64:22:c8:1a:94:4f:94:8e:a0:b4:4b:6e:d9:33:32:
33:a5:04:00:1f:c1:1e:43:be:70:a3:a5:28:94:f0:
46:80:9f:53:2f:87:27:06:55:6c:e3:bd:e5:de:c2:
b8:98:79:f2:ac:ca:9f:88:c7:35:e3:eb:f5:06:c3:
ff:cb:ee:85:6b:7d:cd:66:87:e1:97:62:98:77:88:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:BE:5B:5F:09:06:E6:77:0F:02:89:6E:AB:7B:54:E0:D2:8F:47
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/F1C-W18JBuZ3DwKJbqt7VODSj0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.156.0/22
45.145.72.0/22
45.150.164.0/22
45.150.226.0/23
45.151.132.0/22
45.154.212.0/22
94.154.114.0/24
178.22.30.0/24
188.93.139.0/24
193.218.200.0/23
193.221.94.0/23
194.124.218.0/23
194.124.224.0/23
194.147.98.0-194.147.101.255
212.18.111.0/24
IPv6:
2a0e:da40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
c4:ac:80:22:4d:29:6d:b1:dd:6e:31:34:7e:86:4d:79:bb:c5:
cf:34:af:e9:4d:e6:1a:4c:9d:77:c6:19:de:5d:42:38:0e:88:
f7:6c:fb:6f:fc:7b:76:1e:05:b8:86:4a:6f:cf:bf:65:c5:35:
3e:92:b6:3e:4a:40:45:8e:ff:d2:ea:d1:da:5e:ef:84:9d:7a:
11:0a:2c:e3:24:34:ef:d8:fb:2f:cb:95:17:fb:67:2a:e4:ab:
57:29:49:30:64:28:a1:fa:43:2f:32:b4:aa:1f:bb:c2:13:0d:
d3:df:bd:ce:0a:8f:cb:11:d6:14:54:5a:bf:db:4f:38:82:a9:
b8:aa:70:80:ef:55:1c:b6:a5:b9:fc:e0:4b:96:df:72:a1:5c:
bd:65:3f:4b:16:22:c0:a0:7b:e2:a7:c3:46:9d:6e:5f:47:82:
74:9b:5d:3c:b4:a7:8f:db:1d:0a:51:32:24:ce:c4:6d:50:08:
14:b9:30:df:7d:eb:b1:f8:71:ba:4d:27:0b:91:ce:0f:44:9e:
dd:8a:f4:00:ae:5d:dd:46:4d:eb:d8:a3:1c:06:29:30:6e:14:
35:a3:36:22:b2:a9:c9:f5:9b:6d:2c:58:1d:0a:f5:81:d4:93:
88:da:2f:f5:ef:35:f6:53:b1:bd:22:0c:ec:57:4c:15:a2:47:
8b:74:21:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 29 05:58:30 2024 by rpki-client on console-ams.rpki-client.org